Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TASKHFFUP' = '<SYSTEM32>\RM7L7S\TASKHFFUP.EXE'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TASKHFF' = '<SYSTEM32>\RM7L7S\TASKHFF.EXE'
- 'C:\Z6DB4246.exe'
- 'C:\Z6DB4246.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\install_reader11_br_mssa_aaa_a[1].exe
- C:\Z6DB4246.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\PROGRAMAsemgb[1].AC4
- C:\MJHU8.AC1
- 'www.4s##red.com':80
- www.4s##red.com/download/7pjU6s9Rba/install_reader11_br_mssa_aaa_a.exe
- www.4s##red.com/download/fhE5fGY5ce/PROGRAMAsemgb.AC4
- DNS ASK www.4s##red.com
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'